Recently, GitLab[1] and GitKraken[2] notified users about a vulnerability in GitKraken version v in range 7.6.0<=v<=8.0.0. Those versions are affected by CVE-2021-41117[3] and therefore, generate weak SSH keys. Now, as an administrat…
OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I’m using is somewhat weak and defaults to using a 1024 RSA key size. I’m trying to determine if it’s worth the hassle of manually changing things to…
When deriving a private key from a password, will the resulting secret key be any weaker if the user email is included in the function input? Meaning, user email concatenated with the user password.
I’m using scrypt for key derivation, wi…
From what I’ve read, I was able to deduce a number of steps but I am not sure if they cover all action or if they are 100% correct.
Initial setup for client
Enables ssh service
Initial setup for server
Installs a ssh-server, that wi…
I am trying to piece together some information about the security system in Android. Particularly about how user’s password/PIN is connected with encryption keys in file-based encryption mode. I’m doing this for my university project. I’ve…
I am writing a Java application that is required to locally authenticate a user with a password and then use the password to generate an AES-256 key for local file encryption/decryption.
I understand the principles behind everything and h…
I want to generate a key pair with gpg2 2.1.11 and libgcrypt 1.6.5.
I use the command gpg2 –expert –full-key-gen. This allows me to choose an ECC:
Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elg…
Most users would simply type ssh-keygen and accept what they’re given by default.
But what are the best practices for generating ssh keys with ssh-keygen?
For example:
Use -o for the OpenSSH key format rather than the older PEM format (Op…
Similar to the question here, I’d like to apply the same question to a person.
For example, I have implanted a chip in my hand1 that holds an encrypted private key that serves as my personal unique identifier. As it is tied to my person ph…
I’m trying to verify a 2-way SSL connection using the openssl s_client command
openssl s_client -connect localhost:8883 -CAfile ca.pem -cert client.crt -key client.key
The openssl s_client fails with the following error:
openssl s_client…
